* the very generic tools
directory name "policy" is changed to "security"
and the included
"policy_tool" to "secpol_tool"

* the single constant POLICY_INTERFACE_VERSION
is replaced by ACM_INTERFACE_VERSION;
the security policy headers are versioned independently
since the policy can be supplied at boot time instead of
through the hypervisor interface